Merge multipath-tools from Debian unstable for mantic

Bug #2018051 reported by Bryce Harrington
26
This bug affects 3 people
Affects Status Importance Assigned to Milestone
multipath-tools (Ubuntu)
Fix Released
High
Mitchell Dzurick

Bug Description

Upstream: 0.9.5
Debian: 0.9.4-3
Ubuntu: 0.8.8-1ubuntu2

Debian does new releases regularly, so it's likely there will be newer versions available before FF that we can pick up if this merge is done later in the cycle.

If it turns out this needs a sync rather than a merge, please change the tag 'needs-merge' to 'needs-sync', and (optionally) update the title as desired.

### New Debian Changes ###

multipath-tools (0.9.4-3) unstable; urgency=medium

  [ Chris Lamb ]
  * [f6f7ab0] Avoid race condition in man page build.
    Leads to unreproducible contents. (Closes: #1030727)

 -- Chris Hofstaedtler <email address hidden> Tue, 07 Feb 2023 10:16:57 +0000

multipath-tools (0.9.4-2) unstable; urgency=medium

  * [1517c01] Install tmpfiles.d snippet into non-usr-merged compatible location

 -- Chris Hofstaedtler <email address hidden> Thu, 02 Feb 2023 07:52:50 +0000

multipath-tools (0.9.4-1) unstable; urgency=medium

  * [369b812] New upstream version 0.9.4 (Closes: #1022742)
  * [ee2206e] Refresh patches
  * [bcb0b07] Rework build steps to follow upstream changes.
    And install libmpathutil.so.
  * [f8ef90a] Use upstream-supported way of disabling systemd (for udeb)
  * [8785eef] Update lintian-overrides

 -- Chris Hofstaedtler <email address hidden> Sun, 25 Dec 2022 23:19:21 +0000

multipath-tools (0.9.0-4) unstable; urgency=medium

  [ Chris Lamb ]
  * [3a71447] Make the build reproducible (Closes: #1016583)

  [ Chris Hofstaedtler ]
  * [d815e6b] Use libedit instead of libreadline.
    Using patches from openSUSE, expected to go upstream in the next
    release.
    Thanks to Martin Wilck <email address hidden>, Bastian Germann <email address hidden>
    (Closes: #979095)
  * [f0e62a1] Add more patches from openSUSE to fix small bugs

 -- Chris Hofstaedtler <email address hidden> Sat, 13 Aug 2022 13:08:06 +0000

multipath-tools (0.9.0-3) unstable; urgency=medium

  * [baa940a] Install reportbug helper using dh_bugfiles (Closes: #1016512)

 -- Chris Hofstaedtler <email address hidden> Tue, 02 Aug 2022 08:21:25 +0000

multipath-tools (0.9.0-2) unstable; urgency=medium

  [ Athos Ribeiro ]
  * [e3e7c47] d/t/kpartx-file-loopback: silence kpartx messages to stderr

  [ Chris Hofstaedtler ]
  * [057ee38] Apply wrap-and-sort -a
  * [8c9d6fe] Use debhelper compat level 13
  * [99f87ed] Use dh_missing
  * [f7cde4c] Use dh_installsystemd
  * [6797e0c] d/control: fix Depends/Pre-Depends mixup
  * [c1cb1ba] Use debhelper sequencer (Closes: #801884)
  * [eeb7a95] Remove upgrade code from versions before oldoldoldstable.
    Specifically remove the debconf warning if scsi_id is still used (old
    udev), and the init script bug fix. Rids us of all custom postinst/prerm
    scripts.
  * [8491532] Use only one way of installing manpages
  * [32fb1aa] Fix typo in README.Debian
  * [5be350e] Possibly fix multipath in d-i
  * [c46f47a] Make initramfs scripts +x again

 -- Chris Hofstaedtler <email address hidden> Sat, 30 Jul 2022 14:31:16 +0000

multipath-tools (0.9.0-1) unstable; urgency=medium

  * [6f546d1] New upstream version 0.9.0
  * [8ff5696] Refresh patches
  * [11da4e0] Follow manpages filename changes
  * [bde7d75] Install new modules-load.d dropin file
  * [1ac2df6] Avoid setting EXTRAVERSION

 -- Chris Hofstaedtler <email address hidden> Fri, 29 Jul 2022 22:02:31 +0000

multipath-tools (0.8.8-1) unstable; urgency=medium

  [ Utkarsh Gupta ]
  * [74952ce] d/t/kpartx-file-loopback: silence gdisk warnings on stderr
  * [a3ad859] d/t/tgtbasedmpaths: Use stable wwn-* names in autopkgtest
  * [7a22711] d/t/tgtbasedmpaths: Add sleep to allow for device creation

  [ Ritesh Raj Sarraf ]
  * [9169942] Add some documentation about LVM + DM-Multipath setup.
    Thanks to Carlos Barros (Closes: 1001710)

  [ Chris Hofstaedtler ]
  * [7fcb8ba] New upstream version 0.8.8
  * [e63a379] Refresh patches
  * [4ab9ce2] Drop old dmsetup_env hack
    dmsetup long supports DM_NAME and DM_UUID, and the other variables
    are not used anymore.
  * [2cd669e] Avoid installing libmpathvalid.so until users appear

 -- Chris Hofstaedtler <email address hidden> Sun, 16 Jan 2022 22:57:28 +0000

### Old Ubuntu Delta ###

multipath-tools (0.8.8-1ubuntu2) lunar; urgency=medium

  * SECURITY UPDATE: symlink attack
    - debian/patches/CVE-2022-41973.patch: use /run instead of /dev/shm in
      .gitignore, Makefile.inc, libmultipath/defaults.h,
      multipath/Makefile, multipath/multipath.rules.in,
      multipath/tmpfiles.conf.in.
    - debian/multipath-tools.install: install tmpfiles.d/multipath.conf.
    - debian/rules: copy udev rule after build.
    - CVE-2022-41973
  * SECURITY UPDATE: authorization bypass
    - debian/patches/CVE-2022-41974-pre1.patch: fix command completion in
      interactive mode in multipathd/callbacks.c, multipathd/cli.c,
      multipathd/cli_handlers.c, multipathd/main.c.
    - debian/patches/CVE-2022-41974.patch: more robust command parsing in
      multipathd/callbacks.c, multipathd/cli.c, multipathd/cli.h,
      multipathd/cli_handlers.c, multipathd/uxlsnr.c.
    - debian/patches/CVE-2022-41974-2.patch: fix command completion with
      robust parser in multipathd/cli.c, multipathd/cli.h,
      multipathd/uxlsnr.c.
    - debian/patches/CVE-2022-41974-3.patch: add test for command parsing
      in Makefile.inc, tests/Makefile, tests/cli.c, multipathd/cli.h,
      multipathd/cli.c.
    - debian/patches/CVE-2022-41974-4.patch: fix memory leak handling
      invalid commands in multipathd/uxlsnr.c.
    - CVE-2022-41974

 -- Marc Deslauriers <email address hidden> Fri, 28 Oct 2022 14:43:41 -0400

multipath-tools (0.8.8-1ubuntu1) jammy; urgency=medium

  * Merge with Debian unstable (LP: #1946834, #1961136). Remaining changes:
    - d/p/enable-find-multipaths.patch: re-enable find_multipaths by
      default -- see the removed 'add_find-multipaths.patch' (LP 1463046)
    - d/p/kpartx-Improve-finding-loopback-device-by-file.patch: Improve
      finding loopback devices (LP 1747044)
    - d/multipath.conf: Install friendly names multipath.conf by default,
      instead of generating it in every installer.
    - debian/multipath-tools.dm-mpath-lvm.udev: Adjust initramfs integration
      for new udev rules
    - Remove d/initramfs/local-top (redundant with other initramfs scripts):
      + init-top: take over loading modules (dm-multipath and SCSI device
        handlers); move the missing dm-emc there (now scsi-dh-emc; see
        BTS 567014).
      + d/rules: do not install local-top anymore.
      + remove d/initramfs/local-top
    - debian/initramfs/hooks: Add dm-queue-length: users may want to
      change from the default selector and should be able to do so.
      (LP 1673350)
    - multipath initramfs fixes for booting from multipathed devices:
      + d/initramfs/hooks: also copy wwids file on the installed
        system to ensure all paths come up on boot. (LP 1479929)
      + d/initramfs/hooks: install multipathd and required
        directories.
      + d/initramfs/hooks: copy multipath udev rules to initramfs
      + d/initramfs/hooks: do not copy kpartx rules to initramfs
      + d/initramfs/local-bottom: remember to stop multipathd.
      + d/initramfs/local-premount: wait for udev to settle before
        the call to resolve_device() in local_mount_root(), so the
        by-uuid/ symlinks have a chance to be updated by the
        multipath udev rules (LP 1503286).
      + d/initramfs/local-premount: Run multipath with -B so not to
        assign names nor change /etc/multipath/bindings during
        initramfs (LP 1561103)
      + d/rules: install d/initramfs/local-bottom
      + d/rules: install d/initramfs/local-premount
    - debian/initramfs/local-bottom: wait for the multipathd unix
      socket to close, so to avoid multipathd.socket unit failure.
      (LP 1682178)
    - Split kpartx initramfs bits into kpartx-boot for dmraid (LP 941874)
      + d/initramfs/kpartx.hook
      + d/kpartx-boot.postinst
      + d/kpartx-boot.postrm
      + d/control: Add kpartx-boot package for dmraid
      + d/rules: Install kpartx initramfs hook
    - d/rules: Move udev rules to priority 95, because rules that load
      modules should be >90.
    - Don't build the multipath-tools binary package on i386; we only want
      kpartx.
  * Dropped changes:
    - Use stable wwn-* names in autopkgtest that work with or without
      friendly names, as scsi-${DM_NAME} is not a stable symlink name.
      [ Included in 0.8.8-1 ]
    - debian/tests/tgtbasedmpaths: Add sleep to allow for device creation
      [ Included in 0.8.8-1 ]
    - d/p/kpartx_more_loopback_fixes.patch: fix loopback mounted files
      some more: since we stat() the loopback device node, we can't rely
      on S_ISREG() tests to handle this case, and should look at the
      device itself instead. (LP 1543430)
      [ Applied upstream in 0.8.6 ]
    - d/p/no-start-in-containers.patch: Do not attempt to start
      multipath-tools in containers, should switch for on-demand udev/socket
      based activation in the future. (LP 1823093)
      [ Applied upstream in 0.8.7 ]
    - d/t/control: use allow-stderr for kpartx-file-loopback, the new
      gdisks version displays warnings on stderr now.
      [ Fixed in 0.8.8-1 ]
  * Added changes:
    - d/t/kpartx-file-loopback: silence kpartx messages to stderr
    - d/rules: remove -Bsymbolic-functions from LDFLAGS

 -- Athos Ribeiro <email address hidden> Mon, 21 Feb 2022 18:18:27 -0300

Related branches

CVE References

Bryce Harrington (bryce)
Changed in multipath-tools (Ubuntu):
milestone: none → ubuntu-23.07
Bryce Harrington (bryce)
Changed in multipath-tools (Ubuntu):
assignee: nobody → Bryce Harrington (bryce)
Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in multipath-tools (Ubuntu):
status: New → Confirmed
Bryce Harrington (bryce)
Changed in multipath-tools (Ubuntu):
milestone: ubuntu-23.07 → ubuntu-23.06
Changed in multipath-tools (Ubuntu):
assignee: Bryce Harrington (bryce) → Mitchell Dzurick (mitchdz)
Bryce Harrington (bryce)
Changed in multipath-tools (Ubuntu):
status: Confirmed → In Progress
importance: Undecided → High
Revision history for this message
Sergio Durigan Junior (sergiodj) wrote :

The following bug can likely be closed when merging the new version from Debian:

https://bugs.launchpad.net/ubuntu/+source/multipath-tools/+bug/2026881

Revision history for this message
Mitchell Dzurick (mitchdz) wrote :

A MP is almost ready for this. Most of our added changes needed to have some change to them, so I'm double checking that there was no regressions. In the MP I'll list the commits that I had to amend.

Changed in multipath-tools (Ubuntu):
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (6.8 KiB)

This bug was fixed in the package multipath-tools - 0.9.4-5ubuntu1

---------------
multipath-tools (0.9.4-5ubuntu1) mantic; urgency=medium

  * Merge with Debian unstable (LP: #2018051). Remaining changes:
    - d/p/enable-find-multipaths.patch: re-enable find_multipaths by
      default -- see the removed 'add_find-multipaths.patch' (LP 1463046)
    - d/multipath.conf: Install friendly names multipath.conf by default,
      instead of generating it in every installer.
    - d/multipath-tools.dm-mpath-lvm.udev: Adjust initramfs integration
      for new udev rules
    - Remove d/initramfs/local-top (redundant with other initramfs scripts):
      + init-top: take over loading modules (dm-multipath and SCSI device
        handlers); move the missing dm-emc there (now scsi-dh-emc; see
        BTS 567014).
      + remove d/initramfs/local-top
    - d/initramfs/hooks: Add dm-queue-length: users may want to
      change from the default selector and should be able to do so.
      (LP 1673350)
    - multipath initramfs fixes for booting from multipathed devices:
      + d/initramfs/hooks: also copy wwids file on the installed
        system to ensure all paths come up on boot. (LP 1479929)
      + d/initramfs/hooks: install multipathd and required
        directories.
      + d/initramfs/hooks: copy multipath udev rules to initramfs
      + d/initramfs/hooks: do not copy kpartx rules to initramfs
      + d/initramfs/local-bottom: remember to stop multipathd.
      + d/initramfs/local-premount: wait for udev to settle before
        the call to resolve_device() in local_mount_root(), so the
        by-uuid/ symlinks have a chance to be updated by the
        multipath udev rules (LP 1503286).
      + d/initramfs/local-premount: Run multipath with -B so not to
        assign names nor change /etc/multipath/bindings during
        initramfs (LP 1561103)
    - debian/initramfs/local-bottom: wait for the multipathd unix
      socket to close, so to avoid multipathd.socket unit failure.
      (LP 1682178)
    - Split kpartx initramfs bits into kpartx-boot for dmraid (LP 941874)
      + d/kpartx-initramfs/hooks/kpartx
      + d/kpartx-boot.install
      + d/kpartx-boot.postinst
      + d/kpartx-boot.postrm
      + d/control: Add kpartx-boot package for dmraid
    - d/rules: Move udev rules to priority 95, because rules that load
      modules should be >90.
    - d/rules: remove -Bsymbolic-functions from LDFLAGS
      (https://github.com/opensvc/multipath-tools/issues/26)
    - Don't build the multipath-tools binary package on i386; only kpartx.
  * Dropped changes:
    - d/p/kpartx-Improve-finding-loopback-device-by-file.patch: Improve
      finding loopback devices (LP 1747044)
      [ Dropping due to LP: #1961633 ]
    - d/rules: copy udev rule after build.
      [ Included in debian version 0.9.4-5 ]
    - d/multipath-tools.install: install tmpfiles.d/multipath.conf
      [ Included in debian version 0.9.4-2 ]
    - SECURITY UPDATE: symlink attack CVE-2022-41973
      [ Applied upstream in 0.9.4 ]
    - SECURITY UPDATE: authorization bypass CVE-2022-41974
      [ Applied upstream in 0.9.4 ]
  * Added changes:
    - d/rules: do not install init scripts...

Read more...

Changed in multipath-tools (Ubuntu):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.